Comment 13 for bug 1931615

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/victoria)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/799240
Committed: https://opendev.org/openstack/kolla-ansible/commit/5c70c920c0ad6ad38d98c04c6a12a8a212ad1cc4
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit 5c70c920c0ad6ad38d98c04c6a12a8a212ad1cc4
Author: Radosław Piliszek <email address hidden>
Date: Thu Jun 10 17:26:38 2021 +0000

    Disable docker's ip-forward when iptables disabled

    With the new default since Wallaby, starting Docker makes it
    enable forwarding and not filter it at all.
    This may pose a security risk and should be mitigated.

    Closes-Bug: #1931615
    Change-Id: I5129136c066489fdfaa4d93741c22e5010b7e89d
    (cherry picked from commit 0fa4ee56eb86eb7d4b4e3bb9d9c9993f6906c1bd)